In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.145-95.156Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-debuginfo-common-aarch64 | Aug 28, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-6.1.72-96.166Upgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-devel | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Suse | — | Upgrade kernel-default-optionalUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade dtb-amazonUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-rockchip | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub